MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

disabled AV software correlation and re-ran jq-all-the-things

pull/40/head
Thomas Gardner 2017-10-24 10:23:46 -04:00
parent f9204db304
commit 1c4933c1ce
2 changed files with 98 additions and 97 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

91
objects/av-signature/definition.json
View File

@ -1,47 +1,48 @@
{
"required": [
"software",
"signature"
],
"attributes": {
"software": {
"description": "Name of antivirus software",
"categories": [
"Antivirus detection"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"signature": {
"description": "Name of detection signature",
"categories": [
"Antivirus detection"
],
"ui-priority": 2,
"misp-attribute": "text"
},
"text": {
"description": "Free text value to attach to the file",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"datetime": {
"description": "Datetime",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
}
"required": [
"software",
"signature"
],
"attributes": {
"software": {
"description": "Name of antivirus software",
"disable_correlation": true,
"categories": [
"Antivirus detection"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"version": 1,
"description": "Antivirus detection signature",
"meta-category": "misc",
"uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e",
"name": "av-signature"
}
"signature": {
"description": "Name of detection signature",
"categories": [
"Antivirus detection"
],
"ui-priority": 2,
"misp-attribute": "text"
},
"text": {
"description": "Free text value to attach to the file",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"datetime": {
"description": "Datetime",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
}
},
"version": 1,
"description": "Antivirus detection signature",
"meta-category": "misc",
"uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e",
"name": "av-signature"
}

104
objects/virustotal-report/definition.json
View File

@ -1,54 +1,54 @@
{
"required": [
"permalink"
],
"attributes": {
"community-score": {
"description": "Community Score",
"disable_correlation": true,
"categories": [
"External analysis"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"detection-ratio": {
"description": "Detection Ratio",
"disable_correlation": true,
"categories": [
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"first-submission": {
"description": "First Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-submission": {
"description": "Last Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"permalink": {
"description": "Permalink Reference",
"categories": [
"External analysis"
],
"ui-priority": 2,
"misp-attribute": "link"
}
"required": [
"permalink"
],
"attributes": {
"community-score": {
"description": "Community Score",
"disable_correlation": true,
"categories": [
"External analysis"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"version": 1,
"description": "VirusTotal report",
"meta-category": "misc",
"uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"name": "virustotal-report"
}
"detection-ratio": {
"description": "Detection Ratio",
"disable_correlation": true,
"categories": [
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"first-submission": {
"description": "First Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-submission": {
"description": "Last Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"permalink": {
"description": "Permalink Reference",
"categories": [
"External analysis"
],
"ui-priority": 2,
"misp-attribute": "link"
}
},
"version": 1,
"description": "VirusTotal report",
"meta-category": "misc",
"uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"name": "virustotal-report"
}